Staff Backend Engineer

Role overview

Join GitLab’s Software Composition Analysis (SCA) team as a Staff Backend Engineer. You will drive the implementation of security capabilities that help customers understand and manage risk in their software supply chain, with a focus on dependency scanning and container scanning.

Responsibilities

• Implement security features that improve how customers manage software supply chain risk.
• Enhance GitLab SCA capabilities, specifically:
  • Dependency scanning
  • Container scanning
• Contribute hands-on code and solve complex technical challenges.
• Collaborate with Product and Security teams to translate product/security needs and customer feedback into technical solutions.
• Establish patterns that improve collaboration across a distributed, async-first team.

Requirements

• Deep hands-on expertise building and evolving dependency scanning and container scanning capabilities.
• Hands-on experience with Software Composition Analysis (SCA) and experience shipping complex security features.
• Backend expertise, particularly Go and/or Ruby on Rails, with strong ability to learn new technologies quickly.
• Ability to explain complex technical and security concepts to engineers and stakeholders.
• Experience working effectively in distributed, async-first teams across multiple time zones.
• Ability to evaluate technical tradeoffs in SCA/security tooling and deliver maintainable solutions.
• Proven ability to design solutions balancing complexity, performance, and maintainability.

Nice to have

• Interest from candidates with varying experience levels is welcome; not every listed requirement must be met.